b97a63704dee1e3b2f6ed3b5e40da5c04ad4b348befd0d0cbc07352ce967cec7

Analysis

max time kernel
111s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
10-08-2024 07:01

Target

8532645f400e945235d56569b92a6317_JaffaCakes118.exe
Size

25KB
MD5

8532645f400e945235d56569b92a6317
SHA1

2c41549f86353625695c87efc6725f77db78d4cf
SHA256

b97a63704dee1e3b2f6ed3b5e40da5c04ad4b348befd0d0cbc07352ce967cec7
SHA512

49c48488449ce58e97543759d049c9a09cce0dc467ab4421412d2c90496e28d543f14fad4c32a5df47cfd579e48d870ae4c0d36278adf5e66b4a9fa15b976cb5
SSDEEP

768:oKcoCN1+bTlec2ot7lmGehnQ/iBQZLqr:RcbN1+Vf2ovmG0ngi0g

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3424-0-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral2/memory/3424-2-0x0000000000400000-0x0000000000410000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2160	3424	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\8532645f400e945235d56569b92a6317_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\8532645f400e945235d56569b92a6317_JaffaCakes118.exe"
1⤵
PID:3424
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3424 -s 316
  2⤵
  - Program crash
  PID:2160

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3424 -ip 3424
1⤵
PID:2080

memory/3424-0-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/3424-1-0x0000000000570000-0x0000000000573000-memory.dmp

Filesize
12KB

Download
memory/3424-2-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download